Security Task Manager

User Guide

Enhanced Process Viewer with security risk rating

Neuber Software

A. & M. Neuber Software GmbH

Security Task Manager

Table of Contents
Part I Features of Security Task Manager? Part II Using Security Task Manager 4 6

................................................................................................................................... 6 Overview ................................................................................................................................... 6 Viewing process details ................................................................................................................................... 7 Learning more about a process (Google search) ................................................................................................................................... 7 Ending a process ................................................................................................................................... 7 Using quarantine folder ................................................................................................................................... 8 Printing process list ................................................................................................................................... 8 Exporting process list ................................................................................................................................... 8 Writing a comment ................................................................................................................................... 8 Checking Hosts file changes ................................................................................................................................... 9 Changing the language

Part III Basics

11

................................................................................................................................... 11 Risk Rating of processes ................................................................................................................................... 12 Process types ................................................................................................................................... 12 Contacting the Security Task Manager Team ................................................................................................................................... 13 Uninstalling

Part IV Protecting your computer with SpyProtector

15

................................................................................................................................... 15 Delete traces of your Internet and computer activity ................................................................................................................................... 15 Disable keyboard monitoring ................................................................................................................................... 15 Disable other monitoring ................................................................................................................................... 15 Warning when registry is changed

Part V Registration and Order information

17

................................................................................................................................... 17 Remarks about the trial version ................................................................................................................................... 17 How to register Security Task Manager ................................................................................................................................... 17 How to unlock the shareware version

Index

18

Neuber Software

Features of Security Task Manager?

Part

Neuber Software

Security Task Manager

I.

Features of Security Task Manager?

Security Task Manager provides advanced information about programs and processes running on the computer. For each process it shows the following information not shown in Windows Task Manger: file name and directory path security risk rating description start time C PU usage graph program icon contained hidden functions (keyboard monitoring, Browser supervision, manipulation) process type (visible window, systray program, DLL, IE-Plugin, service) The Security Task Manager also recognizes virtual driver software, services, BHO or processes hidden from the Windows Task Manager.

Related Topics

Neuber Software

Using Security Task Manager

Part

II

Neuber Software

Security Task Manager

II. Using Security Task Manager

Overview
Security Task Manager shows all active processes on your computer. The Rating tells you all relevant security functions a process contains. The listed processes can be sorted by the following properties. C lick on View menu to chose, which properties are shown: Name Rating Process ID (PID) C PU Memory Active runtime File Type Start Title and Description C ompany and Product C lick a process to obtain more information about the process. You can: see properties end process place process in quarantine Note C lick Windows processes button to see all internal Windows operating system processes. Windows system processes are not shown by default. When you are logged on to Windows with a standard user account, perhaps you see for some system processes: <taskeng.exe - Services - Access denied> Please run Se c urity T a s k M a na g e r as Administrator in this case: Right-mouse click the Se c urity T a s k M a na g e r icon. Then click Run as administrator.
Related Topics

Viewing process details

C lick on a process to see more information about this process. Follwing properties are shown: Name Rating C ompany Description Type Start File C omment Receive further information or stop the process: Information from the Internet about a process Ending process Putting in quarantine

Neuber Software

Using Security Task Manager

Learning more about a process (Google search)

1 C lick on the process you want to examine. 2 C lick Google button on tool bar.

An information web page is displayed on www.neuber.com/taskmanager where you can submit your opinion about this software/driver software, or read other user comments. You can also search for further information about this process at Google.com. Note Your Internet browser transmits information (e.g. operating system, language setting). Neither the Security Task Manager program nor any of its components connect to the Internet directly. Google.com is one of the most commonly used search engines, and will provide you with relevant results.
Related Topics

Ending a process
1 C lick on a process you want to close. 2 C lick the button End process Move file to quarantine Uninstall Note Ending a process can cause system instability, including crashes. Software that needed Adware programs could not work. Please save opened documents. You can create a restore point, to can restore your Windows system at any time. You need administrator rights for this dialog. To start Security Task Manager with administrator rights, please right-mouse click the Security Task Manager shortcut. Then click Run as...
Related Topics

Remove.

3 Then select one of following options:

Using quarantine folder

The quarantine folder works like the Windows Recycle Bin (trash). When you put a file into quarantine folder , the file is renamed and moved to an isolated folder. C orresponding Autostart keys in the Windows registry are deleted so the process cannot be started again. Restoring the whole process is possible at any time: Restoring processes 1 C lick quarantine button on tool bar.

2 In the quarantine folder click on process you want to restore. 3 C lick Restore button. Note You can create a Windows restore point in the time.
Related Topics

Remove dialog, to restore your Windows system at any

Neuber Software

Security Task Manager

Printing process list

1 On File menu click Print. 2 C hose a printer and make any necessary settings (e.g. duplex print). Note C lick Windows processes button to see all Windows internal processes. Then you can print Windows processes too. Windows system processes are not shown by default.
Related Topics

Exporting process list

1 On File menu click Export to. 2 C hose a file type: Text file (*.txt) Website (*.html) Note C lick Windows processes button to see also all Windows internal processes. Then you be able to save Windows processes too. Windows system processes are not shown by default. Please save the process list from time to time. A saved process list can serve as a point of comparison to help you find new processes in the future.
Related Topics

Writing a comment
You can record a remark about each process, which will be visible in the process properties. You can vote the process to change the Security Task Manager Rating. To write a comment 1 Right mouse click a process you want. 2 C lick Comment... on the appearing context menu. 3 Enter you comment and your opinion about the process.

Related Topics

Checking Hosts file changes

The Windows hosts file is located in c:\Windows\system32\drivers\etc folder by default. This text file contains the mappings of IP addresses to Internet domain names (e.g. www.file.net). If the hosts file was changed without your knowledge, there could be a malware which redirects websites (e.g. from banks, antivirus companies) to fake web pages. You can edit the hosts file with Windows notepad. To deactivate a redirection, simply delete the line. Note The ho s ts file replaces DNS (Domain Name Service). The lm ho s ts file in the same folder replaces WINS, which IP addresses to computers in your LAN network.
Related Topics

Neuber Software

Using Security Task Manager

Changing the language

Security Task Manager recognizes the used language (English, Deutsch, Espanol, ...) automatically. To change the language do the following: 1. On View menu click Language 2. Then click the language you want. Note The software can easily be translated to any language. Simply translate the lgs_english.txt text file in the program's folder, and send it to . You will receive a free registration for your translation. Um die deutsch Sprache einzustellen, klicken Sie hier.
Related Topics

Neuber Software

Basics

Part

III

Neuber Software

Basics

11

III. Basics
Risk Rating of processes
Security Task Manager uses objective criteria to judge the safety risk of a process. Security Task Manager examines the process to determine if it contains critical function calls or suspicious properties. Points are allocated depending on the potential danger of these functions and properties. The sum of the points results in the Security Task Manager Risk Rating (0 to 100 points).

Security Task Manager examines the processes looking for the following functionalities (sorting by dangerousness): Able to record keyboard inputs Hidden stealth process File is hidden Keyboard driver, could record inputs C ould manipulate other programs Able to monitor Internet browser Starts when starting of programs Listen on port Send to port unknown program listens or sends Monitor program starts Window not visible Start when Windows starts No detailed description available Unknown file in Windows folder No Windows system file No description of the program functions: Internet, monitor, record inputs, hide, manipulate functions: not determinable Unknown company Trusted properties (reduces risk): Microsoft signed file Verisign signed file Belongs to C ertified by Own comment C lick on an above property to learn more about this. Note Highly rated programs are not always dangerous; they may just contain properties typical of some known spyware programs. C lick the Windows processes button to see all internal Windows operating system processes. Windows system processes are not shown by default.
Related Topics

Neuber Software

12

Security Task Manager

Process types
Security Task Manager distinguishes between the following types of processes. C lick Type on View menu, to see or hide the type as column in the main window. Software Program Taskbar icon DLL files DLL ShellExecute Internet PlugIns Browser Helpers Objects Driver and Services device driver file driver Service (own process) Service (own process with desktop interaction) Service (shares process) Service (shares process with desktop interaction) C lick on an above type to learn more about this. Note C lick the Windows processes button to see all internal Windows operating system processes. Windows system processes are not shown by default.
Related Topics

Contacting the Security Task Manager Team

Technical C ontact: address: A. & M. Neuber Software GmbH PF 11 05 25 D-06019 Halle Germany (+49) 0700-11 777 000 www.neuber.com/taskmanager

fax: Internet: WWW: email:

The registration is executed by the international registration service ShareIt (Eden/U.S.A, Kln/Germany, London/UK, Roissy/France, Upplands Vsby/Sweden). Eine deutsche Version erhalten Sie unter http://www.neuber.com/taskmanager
Related Topics

Neuber Software

Basics

13

Uninstalling
1 C lick Start-Settings-C ontrol panel. 2 C lick Software. 3 C lick the Remove button to delete Security Task Manager from your C omputer. Note You can also run uninstal.exe in the Security Task Manager directory

Neuber Software

Protecting your computer with SpyProtector

Part

IV

Neuber Software

Protecting your computer with SpyProtector

15

IV. Protecting your computer with SpyProtector

Delete traces of your Internet and computer activity
SpyProtector contains following tools to protect your computer from keylogger, spyware and trojans:

Delete history
C heck this option to eliminate traces of Internet activities (cookies, cache, history, typed URLs) in Internet Explorer. You can also delete the recently used file list of programs (Word, AC DSee, PDF, WinZip, Mediaplayer, etc) and the recently used program list on the Windows Start menu.

Block keyboard monitoring

C heck this option to block the redirection of all keyboard inputs to a keylogger for the current Windows session. Keyboard redirection is realized by programing a Hook function; even keyboard utilities like macro and autotext programs don't use these malicious Hook functions.

Block other monitoring

C heck these options to block programs which log data for the current Windows session: Keyboard inputs (indirect): This prevents monitoring of internal Windows messages (e.g. keyboard inputs) by other programs. Mouse activities: This prevents monitoring of mouse movements and mouse clicks Macro: This prevents recording of user activities. This methode, often used by macro programs, is not typically used by keyloggers. Starting and ending of programs: Program starts and stops are logged. This function is frequently used by tutorial programs (computer based training) to aid user interaction with the software. Attention: Some safe and valid programs (e.g. some Macro programs) do use these Hook functions. If one of your programs stops working after selecting an option above, please deselect the option or restart your computer.

Warn when your registry is changed

C heck this option to see a warning message when any program tries to create an autostart key in the Windows registry. Many dangerous programs use an autostart key in the Registry to activate themselves.

Related Topics

Neuber Software

Registration and Order information

Part

Neuber Software

Registration and Order information

17

V. Registration and Order information

Remarks about the trial version
Security Task Manager is distributed as shareware. Shareware is a distribution method based on honor, and is not a type of software. You are free to use it for a trial period of up to 30 days. If you find this program useful and would like to continue using Security Task Manager, then you are required to register for $29 (29.EUR). You will receive a registration code that you can use to unlock the shareware. The registration code will turn off all nag screens and shareware limitations, and work with future minor updates. As a registered user, you will get: legal license for the software your personal key to unlock trial version free minor updates free software SpyProtector Spyprotector eliminates your Internet traces, warns when Autostart key in registry is changed and disables keyboard and mouse surveillance free technical support (via email or mail) On Help menu click Info... to see whether your version is registered.
Related Topics

How to register Security Task Manager

Order your own registration code for $29 (29 EUR) today! We accept credit cards, PayPal, bank/wire transfer, checks or cash.

Internet: mail/fax: phone:

Secure Order Form Order Form +1 800 406 4966 (English customer support) +49 221 3108830 (de/fr/it/es/pt support) program ID: 174510

Notes If you pay by credit card, you'll receive the registration code immediately. The code unlocks the shareware. One time purchase. No subscription! If you have questions about ordering please ask: ShareIt! Inc., 9625 West 76th Street, Suite 150, Eden Prairie, MN 55344, U.S.A., support@shareit.com
Related Topics

How to unlock the shareware version

1 On REGISTER menu click Unlock the shareware version. 2 Enter the Name and C ode in the registration dialog exactly as shown in the information sent to you. 3 C lick Unlock. Notes If you have questions please ask us.
Related Topics

Neuber Software

18

Security Task Manager

looking for info about process process Type 12 7

Index
-Aactive runtime 6

-Kkeyboard keylogger 11, 15 15

-BBHO buy 12 12 17 Browser Helpers Objects

-Llanguage change 9

-Mmemory monitoring 8 6 11, 15

-Ccomment CPU 6

-NNote 8

-DDLL driver 12 12

-Oorder code Overview 7 8 4 17

-Eend process export to

-PPID 6 15 17 prevent surveilance print 8 price of registered version

-Ffile folder 11 7

-GGoogle search 7

-Hhosts file 8

process comment 8 end 7 print 8 properties 6 rating 11 types 12 Program purchase 6 12 6 17 properties of processes

-Iinformation about processes Internet delete traces 15

-Qquarantine 7

Neuber Software

Index

19

-Rrating 11 17 17 registration code order registration code unlock the shareware Registry Warner remark 8 11 risk of process 15

-Ssave export 8 print 8 Security Task Manager Features 4 Get it now! 17 How to use 6 uninstalling 13 unregistered version service start 6 12 15 SpyProtector

17

-Ttask title Type 6 12 6 12 Taskicon

-Uuninstall 13 17 unlock the shareware

-Wweb information 7

Neuber Software